Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft
File:                     vfo6-DmqHc51j0ieLTGuIgkvyZo.mft (raw, json)
Hash identifier:          hqp4UoSEjiPWPTY1HIxz/IpqnE9R6bIsT46LUmKD8Sg=
Subject key identifier:   14:AC:EF:3E:BF:1B:B2:59:FD:78:6D:5B:F8:C5:1A:F7:15:92:E6:06
Authority key identifier: BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A
Certificate issuer:       /CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
Certificate serial:       019D265F2F9C95CAC892482974102286A89A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft
Manifest number:          188A
Signing time:             Wed 25 Mar 2026 19:01:05 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:05 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:05 +0000
Files and hashes:         1: BgsKeB31VXHMATBr99GvZxAD6LE.roa (hash: JiKvS9bV+6H9nQ9YSMIo96/vZsQgIkUF+T9itNOZVio=)
                          2: LnQ-zPzgqVgXUijx46r1d0YDiYg.roa (hash: KK6oyN4swqYMOPL8Gp/QIITc1me7ju9UH/GTlCJypo0=)
                          3: OIEYZhMWNxTqwPFPtrJQP_P_8kc.roa (hash: oh65h6lMRU5dPAsjnmn6axHzKgGM8bi/szblqT+O4Kc=)
                          4: SDgL2DcW067zsQwIkMGp0Q7DumQ.roa (hash: M7FnxKdjUg7dQJ1DNiK4qvZZAUkfItNkGPtKgFWqy4Q=)
                          5: vfo6-DmqHc51j0ieLTGuIgkvyZo.crl (hash: tmG6AGVWQyVCygbV51jiWMTuguDAUE6B3f6HfA3MCqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:2f:9c:95:ca:c8:92:48:29:74:10:22:86:a8:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
        Validity
            Not Before: Mar 25 19:01:05 2026 GMT
            Not After : Mar 26 19:01:05 2026 GMT
        Subject: CN=14acef3ebf1bb259fd786d5bf8c51af71592e606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:06:14:db:25:b0:cc:0d:7f:74:3a:3c:f5:15:
                    68:34:86:41:3b:c3:4c:2e:2d:25:fd:ad:ff:06:8a:
                    b6:1b:32:74:6f:6b:17:e8:94:88:9a:a7:e8:89:69:
                    42:50:d0:89:41:a3:5b:52:7b:16:c0:3b:55:14:5a:
                    08:36:2c:6f:49:5d:9a:f7:87:6e:44:a9:21:d3:9f:
                    c0:87:8b:51:d6:15:b1:cb:f6:ff:b6:37:3e:a0:1b:
                    07:d8:62:f2:d3:5d:d4:e1:68:b6:43:2a:eb:62:07:
                    90:4d:08:94:b0:db:0f:b7:b0:9a:0f:7a:0c:58:63:
                    0b:0d:77:9c:af:43:f2:04:cd:00:0b:fa:7d:f1:5c:
                    da:1b:6a:03:2f:21:b1:b1:ad:14:f2:43:59:80:d2:
                    75:af:e7:ee:82:71:3f:3c:bc:c1:81:0b:8c:84:67:
                    7a:34:45:e1:75:f8:8c:6b:ae:b0:14:4b:ab:ff:60:
                    df:34:81:cd:ea:bd:63:e4:f9:be:89:48:3f:e5:de:
                    03:b8:58:c3:02:8e:aa:03:2f:18:6f:91:50:ac:35:
                    47:92:4d:c2:9e:94:06:23:a2:05:75:38:7c:92:c1:
                    dd:de:2b:77:86:ab:44:c9:e0:5b:ae:56:fc:a4:62:
                    b6:7b:31:8c:16:f1:a3:42:df:c1:b6:0d:3d:c9:69:
                    41:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AC:EF:3E:BF:1B:B2:59:FD:78:6D:5B:F8:C5:1A:F7:15:92:E6:06
            X509v3 Authority Key Identifier:
                keyid:BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:2a:b9:88:96:df:9e:a0:0c:3d:2e:21:a6:ce:ba:15:3b:9c:
         26:67:52:1b:e2:ea:bf:76:32:6c:2c:80:74:2d:34:ed:35:7c:
         1c:58:e8:c7:6c:e4:82:61:1a:59:2c:70:a1:cd:d1:f5:9e:c1:
         f4:51:37:70:a3:86:3b:81:4e:88:d5:28:48:1c:0c:5c:34:14:
         b4:ad:8a:64:db:bb:39:63:8c:2f:fb:ff:88:1e:67:46:98:60:
         23:fd:31:e4:81:ac:a3:8e:c8:71:87:7c:dc:0e:52:ed:f1:ee:
         20:63:b3:f0:cd:25:7b:c8:f0:f1:01:e6:25:f7:2e:d2:48:c9:
         19:97:9c:c6:fa:11:75:31:2e:27:69:34:2d:eb:88:7b:83:4e:
         e0:a0:c6:8b:4f:c6:05:b7:d5:af:64:c6:0a:f2:58:42:77:ba:
         d9:3b:d5:4d:c5:dd:5f:01:60:39:52:58:89:a7:80:fc:6c:fe:
         e8:0a:41:9b:50:b3:25:51:22:0c:bf:a5:b1:21:88:d4:5f:5d:
         06:76:e4:36:0d:a7:48:47:77:1f:ff:7a:f2:a0:b5:81:0d:ec:
         9d:15:01:31:a7:73:8c:17:a5:96:8c:25:25:a8:e4:34:e4:25:
         68:d9:93:4c:30:10:a7:7c:2e:5a:53:d3:84:96:05:7e:4c:53:
         3a:63:73:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:53:40 2026 by rpki-client